Social EngineeringPhishingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Kevin Grunawalt
bd_7c158b1a5e097e8b · schema v1 · pii pii-v1
Full breach record for Kevin Grunawalt →Kevin Grunawalt dba Verso Financial notified consumers of unauthorized access to an employee email account between October 2023 and February 2024. The unknown actor copied mailbox contents, potentially exposing names, government IDs, and financial account numbers. The company engaged in investigation, enhanced security measures, and offered 12 months of Equifax credit monitoring through Epiq Global.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_54017bc68b5c05c2Maine State AGfiled 2024-09-24(15d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-09-kevin-grunawalt-dba-verso-financial-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2024
- Raw hash
- 05061129d041467f5efdd2719d1cad984ab6f759e71fc3db5db642ba53ae4a9d
Reporting entity
- Name
- Kevin Grunawaltnorm: kevin grunawalt
- Domain
- versofinancial.com
Victim entity
- Name
- Kevin Grunawaltnorm: kevin grunawalt
- Domain
- versofinancial.com
Incident
- Discovered
- Aug 23, 2024
- Materiality determined
- —
- Notification sent
- Oct 9, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.